Upgrade to the Latest Version of Oracle Java JRE/ JDK
Applies to:
Oracle Cloud Infrastructure - Version N/A and later
Linux x86-64
Symptoms
Below paths are showing as vulnerable and need to be updated in Oracle Linux:
Oracle JRE 1.8.0.341 (/opt/oracle.ahf/jre/lib/rt.jar)*
Oracle JRE 1.8.0.341 (/opt/oracle.ahf/common/cvu/jdk/jre/lib/rt.jar)
Cause
The JRE/JDK environment in question is not provided by Oracle Linux.
It is located under /opt/oracle.ahf/ in this case, which is an application directory, not an OS directory.
This means that the JRE (or JDK) is bundled with an application and needs updating with a more recent version of the application that has a more recent version of JRE (or JDK) included with the application itself – this is usually called an application bundle because the application included JRE/JDK as a component.